← back
CVE-2024-9474

PAN-OS: Privilege Escalation (PE) Vulnerability in the Web Management Interface

CVSS 6.9 MEDIUMEPSS 94.8%● KEVCWE-78
In short

A Palo Alto Networks PAN-OS administrator can perform actions with root-level privileges through the web management interface, bypassing normal permission restrictions. This allows an admin to gain unauthorized elevated access to the firewall system.

Technical detail

A privilege escalation vulnerability in PAN-OS web management interface allows an authenticated administrator to execute arbitrary actions with root privileges. The vulnerability requires valid admin credentials and access to the management interface; exploitation results in complete system compromise beyond the attacker's assigned role permissions.

Summary generated and translated by AI from the official description.
A privilege escalation vulnerability in Palo Alto Networks PAN-OS software allows a PAN-OS administrator with access to the management web interface to perform actions on the firewall with root privileges. Cloud NGFW and Prisma Access are not impacted by this vulnerability.
CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/AU:N/R:U/V:C/RE:H/U:Red
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →